From 74f5c63a230a007a462e72c587947361237ec921 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9rome=20Perrin?= <jerome@nexedi.com> Date: Thu, 21 Feb 2008 09:08:58 +0000 Subject: [PATCH] fix security on delete transition for sale opportunity workflow git-svn-id: https://svn.erp5.org/repos/public/erp5/trunk@19447 20353a03-c40f-0410-a6d1-a30d3c3de9de --- .../transitions/delete_action.xml | 24 ++++++++++++++++++- bt5/erp5_crm/bt/revision | 2 +- 2 files changed, 24 insertions(+), 2 deletions(-) diff --git a/bt5/erp5_crm/WorkflowTemplateItem/portal_workflow/sale_opportunity_workflow/transitions/delete_action.xml b/bt5/erp5_crm/WorkflowTemplateItem/portal_workflow/sale_opportunity_workflow/transitions/delete_action.xml index 54e382a45a..b85345b106 100644 --- a/bt5/erp5_crm/WorkflowTemplateItem/portal_workflow/sale_opportunity_workflow/transitions/delete_action.xml +++ b/bt5/erp5_crm/WorkflowTemplateItem/portal_workflow/sale_opportunity_workflow/transitions/delete_action.xml @@ -44,7 +44,7 @@ <item> <key> <string>guard</string> </key> <value> - <none/> + <persistent> <string encoding="base64">AAAAAAAAAAI=</string> </persistent> </value> </item> <item> @@ -70,4 +70,26 @@ </dictionary> </pickle> </record> + <record id="2" aka="AAAAAAAAAAI="> + <pickle> + <tuple> + <global name="Guard" module="Products.DCWorkflow.Guard"/> + <tuple/> + </tuple> + </pickle> + <pickle> + <dictionary> + <item> + <key> <string>roles</string> </key> + <value> + <tuple> + <string>Assignee</string> + <string>Assignor</string> + <string>Owner</string> + </tuple> + </value> + </item> + </dictionary> + </pickle> + </record> </ZopeData> diff --git a/bt5/erp5_crm/bt/revision b/bt5/erp5_crm/bt/revision index 3021b562c4..1edbdbab42 100644 --- a/bt5/erp5_crm/bt/revision +++ b/bt5/erp5_crm/bt/revision @@ -1 +1 @@ -184 \ No newline at end of file +185 \ No newline at end of file -- 2.30.9